The Korea AI IoT Association (hereinafter referred to as the "Organizer") values your personal information and fully complies with relevant data protection laws, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. This Privacy Policy outlines how the Organizer collects, uses, and safeguards the personal information provided by users. This policy applies to the AIoT Korea Exhibition (hereinafter referred to as the "Event") hosted by the Organizer, effective as of August 1, 2026.

1. Purpose of Collection and Use of Personal Information

Personal information is processed strictly for the following purposes. Should the purpose of processing change, necessary measures will be taken in accordance with Article 18 of the Personal Information Protection Act, such as obtaining separate consent.

(1) Purposes of Processing

Event Operations: Processing pre-registration and on-site registration, access control, issuing visitor badges, and providing discounted/free admission benefits.
Communications & Marketing: Sending exhibition advertisements, updates, and newsletters; verifying event participation; and delivering promotional materials.
Member Management & Service Improvement: Analyzing demographic statistics, enhancing current services, developing new services, addressing inquiries/complaints, and issuing official notices.
Customized Services: Analyzing service usage records, access frequencies, and interaction statistics to ensure a secure privacy environment and deliver tailored services.
Exhibitor Interactions: Sharing attendee information with specific exhibitors upon consent (when badge barcodes/QR codes are scanned at exhibitor booths).

(2) Minimum Data Collection

Collecting only the minimum personal information necessary to verify user identity, confirm registration intent, verify age, and prevent unauthorized usage.
Verification of parental/legal guardian consent when processing data of children under 14 years of age.

2. Personal Information Collected & Method of Collection

(1) Collected Information Items

We collect the minimum necessary personal data to provide exhibition guidance and related services.

Mandatory Items: Full Name, Company/Organization Name, Country, Department, Job Title, Zip Code, Address, Office/Mobile Phone Number, Tel, Email Address, Mailing Address, and Survey Responses (Visitor Category, Industry Sector, Job Function, Field of Interesting, Purpose of Visit, Source of Information).

(2) Methods of Data Collection

Personal data is collected only after prior notice and consent, through the following channels:
Online pre-registration and entry processing where users directly consent and input data.
Information provided by affiliated partner services or organizations.
Participation in online and offline events/promotions.

(3) Consent Procedure

Users are provided with "I Agree" and "I Do Not Agree" options. Clicking "I Agree" is deemed as explicit consent to the collection and use of personal data.

(4) Automatically Collected Technical Data

During web/app usage, system generation data may be collected automatically, including OS details, screen size, device ID, IP address, cookies, access timestamp, service usage records, and logs of unauthorized use.

3. Retention and Processing Period of Personal Information

Once the purpose of collection and use is achieved, personal information is promptly destroyed. However, if retention is required pursuant to applicable laws, the information will be stored separately in an isolated database (DB) for the statutory period specified below:

Legal Basis	Retained Data	Storage Period
Act on Consumer Protection in Electronic Commerce	Records on contracts or withdrawal of subscription	5 Years
Act on Consumer Protection in Electronic Commerce, Commercial Act, Framework Act on National Taxes, Income Tax Act, Corporate Tax Act, Value-Added Tax Act	Records on payments and supply of goods, commercial books, and financial statement proofs	5 Years
Act on Consumer Protection in Electronic Commerce	Records on consumer complaints or dispute settlements	3 Years
Act on Consumer Protection in Electronic Commerce	Records on display and advertising	6 Months
Protection of Communications Secrets Act	Web log records of site visits	3 Months

4. Destruction Procedures and Methods

When personal information becomes unnecessary-such as the expiration of the retention period or fulfillment of the processing purpose-the Organizer destroys it without delay.
Destruction Procedure: The personal information subject to destruction is identified and permanently deleted upon approval from the Data Protection Officer.
Destruction Method: Electronic data files are irreversibly deleted using technical methods that prevent recovery.
Hardcopy records are shredded or incinerated.

5. Outsourcing of Personal Information Processing

To ensure seamless event operations, the Organizer delegates specific data processing tasks to qualified third-party contractors as outlined below. The Organizer actively monitors and supervises these contractors to prevent violations of privacy laws.

Contractor	Delegated Tasks	Personal Data Provided	Retention Period	Contact
Sysforu	Online pre-registration system operation	Mandatory Items	Until contract expiration	info@sysforu.co.kr
Govent	On-site registration, entry/exit management, E-ticket & online invitation delivery, e-business card system, demographic analysis	Mandatory Items	Until contract expiration	info@govent.kr
KPMOBILE	Messaging service operations (SMS/LMS)	Name, Company, Mobile No.	Until contract expiration	help@kpmobile.co.kr
Daou Technology	Messaging service operations (SMS/LMS/Kakao)	Name, Company, Mobile No.	Until contract expiration	bizppurio@daou.co.kr
Empathy	Email distribution services	Name, Company, Mobile No.	Until contract expiration	help@maillink.co.kr
Mobile Town	MMS image messaging services	Name, Company, Mobile No.	Until contract expiration	help@maillink.co.kr
Zenid	Payment gateway services	Name, Company, Mobile No.	Until contract expiration	zenid@poswiz.co.kr
Narae DM	Direct Mail (DM) printing and dispatch	Name, Company, Mobile No.	Until contract expiration	nadm@nadm93.com

6. Third-Party Provision of Personal Information

The Organizer provides personal information to third parties strictly within the scope permitted under Articles 17 and 18 of the Personal Information Protection Act (e.g., with explicit user consent or under special legal provisions).

MARS 2026 Co-located Event Access: If a registrant enters the MARS 2026 venue or exhibition zone, submitted registration details will be provided to the MARS 2026 organizers for visitor verification, access control, and event operations.

Exhibitor Badge Scanning: Scanning your badge QR/barcode at an exhibitor's booth is deemed as explicit consent to exchange contact details. Your registration data will be automatically shared with that specific exhibitor for marketing, follow-up, and telemarketing purposes.

Recipient & Contact	Purpose of Use	Information Provided	Retention Period
Co-organizer: K.Fairs Ltd.	Event promotion and information delivery	Registration Data	2 Years
MARS 2026 Organizers (Hwaseong City, Hwaseong Industry Promotion Agency, EXPORUM)	Visitor verification, access control, event management, follow-up satisfaction surveys	Registration Data	2 Years
Participating Exhibitors*	Customer relationship management (CRM) via booth terminals	Registration Data	1 Year
Association of Korean Exhibition Industry (AKEI)	Domestic and international exhibition audits/certifications	Registration Data	1 Year

* Exhibitor Data Transfer Notice: Badges scanned by exhibitors utilizing QR/barcode readers will transfer registration details to those companies for marketing purposes. If you do not wish to share your information with a specific exhibitor, please refrain from allowing your badge to be scanned at their booth.

7. Rights of Data Subjects and Exercise Methods

Attendees may exercise their privacy rights at any time, including requesting access to, correction of, deletion of, or suspension of processing for their personal data. Requests can be submitted in writing, via phone, email, or FAX, and will be processed without delay. If a data subject requests correction or deletion of errors, the data will not be used or provided until the correction/deletion is completed. Rights may be exercised through a legal representative or authorized agent by submitting the power of attorney in accordance with statutory forms. Refusal of consent may result in restricted event admission or limited access to event services.

8. Cookies and Automatic Data Collection

The Organizer uses "cookies" to store and retrieve user preferences, delivering personalized experiences. Users have the option to accept all cookies, receive notifications when cookies are set, or decline all cookies through their web browser settings. Declining cookie installation may result in limited functionality for certain online services.

9. Data Security Measures

Administrative Measures: Establishment and execution of internal management plans, regular employee privacy training.
Technical Measures: Access control management for processing systems, encryption of unique identification data, installation of security software.
Physical Measures: Strict physical access control for server rooms and data storage facilities.
Anti-Spam Policy: Unauthorized harvesting of published email addresses via automated programs is strictly prohibited. Violators are subject to criminal penalties under applicable laws.

10. Data Protection Officer (DPO)

For inquiries, complaints, or feedback regarding personal data management, please contact the designated Data Protection Officer: Data Protection Officer: Director, AIoT Korea Exhibition Secretariat
Phone: +82-2-555-7153
Email: aiot@kaiot.or.kr

11. Remedies for Infringement of Rights

For assistance or dispute resolution regarding personal information infringement, please contact the following Korean government agencies:
Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr / Dial 118
Personal Information Dispute Mediation Committee: www.kopico.go.kr / Dial 1833-6972
Cyber Crime Investigation Unit (Supreme Prosecutors' Office): www.spo.go.kr / Dial +82-2-3480-3573
Cyber Bureau (National Police Agency): cyberbureau.police.go.kr / Dial 182

※ You have the right to refuse consent to the collection and sharing of your personal information with third parties. However, refusal to provide consent may limit your access to pre-registration benefits, visitor badge issuance, and re-entry to the venue.

Effective Date: August 1, 2026